Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFBF94545F1811EFBB41D2A0762E951A.roa
File: DFBF94545F1811EFBB41D2A0762E951A.roa (raw, json)
Hash identifier: cOiYm5e/NQl6R1JlFzU3XmLK3VhbW+6BVkZ8fI6rlt4=
Subject key identifier: B1:58:6E:9F:56:25:98:6F:EA:98:75:78:DD:44:6C:E7:74:8B:76:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E354
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFBF94545F1811EFBB41D2A0762E951A.roa
Signing time: Tue 20 Aug 2024 17:23:11 +0000
ROA not before: Tue 20 Aug 2024 17:23:07 +0000
ROA not after: Sat 04 Apr 2026 17:23:07 +0000
asID: 399077
IP address blocks: 154.82.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58196 (0xe354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 20 17:23:07 2024 GMT
Not After : Apr 4 17:23:07 2026 GMT
Subject: CN=66c4d0ff-10ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:35:49:c4:48:8a:9f:b5:5f:76:c9:f0:34:
f7:5c:d9:ca:9e:ac:5f:5f:e7:47:93:d2:12:5f:1e:
76:02:72:1f:88:60:b4:0a:9d:75:f0:4c:aa:e4:fa:
48:c7:7a:8c:bb:46:79:63:6f:19:a1:77:99:db:4a:
8e:d5:07:23:ec:71:92:01:e2:ff:34:9c:ed:df:be:
06:b9:7e:83:ad:da:a7:30:82:af:d1:b7:6e:7d:3d:
ef:10:e5:b8:4c:0f:8e:a6:2d:47:6e:7d:fc:71:bd:
46:c4:eb:96:ea:e7:1d:a0:41:86:77:08:8b:cf:3b:
87:9c:38:56:c9:58:b8:d1:b9:e0:a0:1b:1c:1f:52:
ab:e1:d1:be:55:e8:4c:fb:0b:b2:dc:45:46:dd:eb:
49:60:31:94:75:00:30:16:d9:24:4b:f8:7c:87:96:
f6:cf:46:55:02:8c:8c:05:f5:84:ba:6b:35:bf:db:
e9:e8:f6:57:c5:ce:90:76:04:a5:e1:08:6f:e1:4e:
69:ef:4c:dc:63:84:f2:9c:04:2a:71:99:6f:00:1e:
1e:ba:72:5e:71:df:57:e2:8f:a7:69:fb:2b:55:48:
b3:ad:8f:3f:a3:dc:ad:a6:79:ca:8c:f8:34:3f:70:
11:77:09:02:19:bf:b1:a8:cb:4d:28:b8:60:af:70:
80:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:58:6E:9F:56:25:98:6F:EA:98:75:78:DD:44:6C:E7:74:8B:76:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFBF94545F1811EFBB41D2A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.64.0/18
Signature Algorithm: sha256WithRSAEncryption
29:51:db:a9:12:2b:8b:68:55:f0:c0:c2:2e:23:9d:ff:1c:25:
96:48:d6:ed:b0:85:2b:fe:eb:21:e0:28:4b:c6:3e:05:28:b2:
01:6d:1a:2f:d7:73:1e:71:5b:e6:d2:f1:63:87:2e:cb:34:11:
21:26:00:9c:dd:c6:02:a3:40:91:fe:e5:be:8a:d6:12:3a:4a:
d7:7b:a6:a3:74:b2:3e:d8:fd:01:23:6b:e9:2c:4f:0e:36:cd:
6d:eb:44:71:0b:1b:f9:0d:6a:cf:af:ff:f8:eb:1a:20:92:e5:
46:ec:f9:9d:5c:1c:0c:31:13:f7:75:23:f4:5a:f4:ea:f7:0d:
ee:0d:07:d3:59:da:43:55:75:34:59:82:8f:c7:24:ba:d9:9c:
b1:c4:2c:df:5d:4e:55:f4:05:ff:b4:e4:1f:cc:dc:13:87:46:
3a:5b:63:5d:46:9c:e0:16:bb:82:45:72:a1:8b:59:63:79:5d:
6d:e5:be:95:80:0d:40:07:43:de:26:e8:2c:78:b4:20:d6:3e:
b8:a3:59:22:ad:07:dc:de:21:52:cd:b6:be:23:be:4c:ea:6a:
27:4f:4f:c0:53:74:6c:1f:18:cb:00:c2:25:03:c4:84:5a:46:
fa:0f:d9:59:d7:78:ac:a3:07:de:35:a8:c7:50:b0:6c:cf:ad:
f5:e5:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:56:51 2024 by rpki-client on console-ams.rpki-client.org